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DETAILED ACTION 

1. Applicant's amendment filed on July 14, 2009 has been entered. Claims 1-64 
are pending. Claims 34-54, 56-63 are withdrawn by the applicant. 

Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set forth in 
section 102 of this title, if the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill in the art to which said subject matter pertains. Patentability shall not be 
negatived by the manner in which the invention was made. 

2. Claims 1-33, 55, 64 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Y. Choi and S. Pack, "Fast Inter-AP Handoff Using Predictive Authentication 
Scheme in a Public Wireless Network." (hereafter "Choi") in view of Faccin et al (US 
Patent No. 6,876,747) and in view of Palekar et al (US Pub. No. 2003/0226017). 

As per claim 1 , Choi teaches: A method for handoff in a wireless communication 
network, comprising: generating a handoff encryption key [Page 1, Introduction, Lines 
11-14, page 6-7, 3.2, Fig. 5, 6]; handing off a wireless terminal from a first access point 
to a second access point [Page 1, Introduction, Lines 11-14, page 6-7, 3.2, Fig. 5, 6]; 
communicating data packets encrypted with the handoff encryption key between the 
second access point and the wireless terminal [page 6-7, 3.2, Fig. 5, 6]. Choi teaches 
the authentication of the wireless terminal with an authentication server [Fig. 5]. 
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Choi doesn't expressively mention immediate secure data transmission before the 
authentication of the wireless terminal is completed. 

Faccin teaches communicating data packets encrypted with the handoff encryption key, 
between the second access point and the wireless terminal for immediate secured data 
transmission (secure data transmission during the handoff without perceivable 
interruption) [col. 2 lines 1-16, Fig. 1, 5, col. 6 lines 35-37]. 

Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Faccin with Choi provide immediate secure data 
transmission during the handoff without perceivable interruption, since one would have 
been motivated to provide security mobility between different cellular networks [Faccin, 
col. 1 lines 9-10]. 

Choi and Faccin do not expressively mention initiating authentication of the wireless 
terminal (re-authentication of the wireless terminal) and communicating the data packet 
for immediate secure data transmission before the authentication of the wireless 
terminal is completed. 

Palekar teaches initiating authentication of the wireless terminal with an authentication 
server and communicating immediate secure data transmission before the 
authentication of the wireless terminal is completed [paragraph 0051]. 
Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Palekar with Choi and Faccin to establish the TLS 
tunnel, since one would have been motivated to provide fast reconnect mechanism that 
allows wireless connections to be quickly resumed and to avoid service disruptions 
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each time the mobile user connects to a different wireless access point [Palekar, 
paragraph 0010]. 

As per claim 2 , the rejection of claim 1 is incorporated and Choi teaches: wherein the 
handoff encryption key is a handoff WEP (Wired Equivalent Privacy) key [Page 1, 
Introduction, Lines 11-14, page 6-7, 3.2, Fig. 5, 6] 

As per claim 3 , the rejection of claim 1 is incorporated and Choi teaches: wherein the 
handoff encryption key is generated by an authentication server [Page 1, Introduction, 
Lines 11-14, page 6-7, 3.2, Fig. 5, 6]. 

As per claim 4 , the rejection of claim 1 is incorporated and Choi teaches: wherein the 
authentication server is an AAAH (Authentication, Authorization, and Accounting Home) 
server [Page 1 , Introduction, Lines 15-20. Figure 5, "Home AAA Server"]. 

As per claim 5 . the rejection of claim 1 is incorporated and Choi teaches: wherein the 
authentication server is an AAAF (Authentication, Authorization, and Accounting 
Foreign) server [Page 1, Introduction, Lines 15-20. Figure 5, "Gateway."]. 
As per claim 6 , the rejection of claim 3 is incorporated and Choi teaches: wherein the 
handoff encryption key is generated according to IEEE 802.11 [Page 2, Introduction, 
Line 6]. 
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As per claim 7 , the rejection of claim 3 is incorporated and Choi teaches: transmitting 
the handoff encryption key to the first and second access points [Page 2, Introduction, 
Lines 17-19]. 

As per claim 8 , the rejection of claim 7 is incorporated and Choi teaches: at the first 
access point transmitting the handoff encryption key to the wireless terminal [Page 7, 
§3.2, Lines 4-6]. 

As per claim 9 , the rejection of claim 8 is incorporated and Choi teaches: at the second 
access point decrypting data from the wireless terminal with the handoff encryption key 
[page 6-7, 3.2, Fig. 5, 6]. 

As per claim 10 , the rejection of claim 3 is incorporated and Choi teaches: 
communicating handoff authentication messages between the wireless terminal and the 
second access points [Page 7, §3.2, Lines 7-11]. 

As per claim 1 1 , the rejection of claim 10 is incorporated and Choi teaches: encrypting 
the handoff authentication messages with the handoff encryption key [Page 7, §3.2, last 
sentence]. 

Choi discloses generation of the handoff was only shown within the 
Authentication, Authorization and Accounting (AAA) server(s). Despite, moving the key 
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generation functionality from the AAA server(s), home or foreign, to the access points 
(AP) by either a transmission of the algorithm itself and its associated parameters or 
simply the parameters (assuming the algorithm is already present within the AP) is 
obvious to anyone of ordinary skill in the art at the time the invention was made 
because both logical units (AAA server(s) and the APs) are logically equivalent with 
regards to key generation. Whether the AAA server generates the handoff key to be 
transmitted to the APs or the AAA server gives the algorithm to the APs in order to 
generate the keys does not change the patentable weight of the invention. Further, the 
board has found that the limitation of the "metallic wrapping," which is really a lining of 
the tube, presents no novel or unexpected result over the metallic connections used in 
the references. Use of such a means of electrical connection in lieu of those used in the 
references solves no stated problem and would be an obvious matter of design choice 
within the skill of the art. The same situation arises in digital implementations when a 
system contains a plurality of logical units capable of the same functionality. Deciding 
whether one logical unit of a network system performs a specified functionality or 
another is an obvious matter of design choice. In other words, change of form or design 
without change of function is no more than choice of design that, in absence of new or 
unobvious result, falls within ken of one having ordinary skill in art and will not sustain 
patentability. In re Launder, 42 CCPA 886, 222 F.2d 371, 105 USPQ 446 (1955); Flour 
City Architectural Metals v. Alpana Aluminum Products, Inc., 454 F. 2d 98, 172 USPQ 
341 (8th Cir. 1972); National Connector Corp. v. Malco Manufacturing Co., 392 F.2d 
766. 157 USPQ 401 (8th Cir.) cert, denied, 393 U.S. 923, 159 USPQ 799 (1968). 
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The claims are addressed individually in light of the reference teaching the same 
functionality of the instant application, and moving said functionality between the AAA 
server(s) and access points having been deemed obvious: 

As per claim 12 , the rejection of claim 1 is incorporated and Choi teaches: wherein the 
handoff encryption key is generated by the first and second access points as a function 
of common handoff encryption key generation information from an authentication server 
[Transposing functionality from one logical unit to another to forgo network 
communication is well known in the art and deemed obvious, and key generation by 
parameters (MAC, IP address, and etcetera) is outlined within the taught use of IAPP 
(Page 2, Lines 11-15). Please see "IAPP Enhancement Protocol," §3.3-4, pages 343- 
344, for verification.]. 

As per claim 13 , the rejection of claim 1 is incorporated and Choi teaches: at the second 
access point, determining whether a packet received is encrypted by the handoff 
encryption key [Page 7, §3.2, last sentence. Also Figure 6]. 

As per claim 14 , the rejection of claim 13 is incorporated and Choi teaches: at the 
second access point, decrypting a packet encrypted by the handoff encryption key 
[Page 7, §3.2, Also Figure 6]. 
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As per claim 15 , the rejection of claim 1 is incorporated and Choi teaches: the first 
access point and the second access point receive a common handoff authentication key 
generation process from an authentication server [Page 6, §3.2, Lines 12-14]. 

As per claim 16 , the rejection of claim 15 is incorporated and Choi teaches: providing a 
secret parameter to a handoff encryption key generator associated with the first access 
point; providing an open parameter to the handoff encryption key generator associated 
with the first access point; and generating the handoff encryption key as a function of 
the secret parameter and the open parameter [Key generation by parameters (MAC, IP 
address, and etcetera) is outlined within the taught use of IAPP (Page 2, Lines 11-15). 
Please see "IAPP Enhancement Protocol," §3.3-4, pages 343-344, for verification]. 

As per claim 17 , the rejection of claim 16 is incorporated and Choi teaches: wherein the 
secret parameter comprises information about the authentication server [Key generation 
by parameters (MAC, IP address, and etcetera) is outlined within the taught use of IAPP 
(Page 2, Lines 11-15). Please see "IAPP Enhancement Protocol," §3.3-4, pages 343- 
344, for verification]. 

As per claim 18 , the rejection of claim 17 is incorporated and Choi teaches: the secret 
parameter comprises ID information of the authentication server and at least one 
common parameter of the authentication server [Key generation by parameters (MAC, 
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IP address, etc) is outlined within the taught use of IAPP (Page 2, Lines 11-15). Please 
see "IAPP Enhancement Protocol," §3.3-4, pages 343-344, for verification.]. 

As per claim 19 , the rejection of claim 16 is incorporated and Choi teaches: wherein the 
open parameter comprises information about the first access point [Key generation by 
parameters (MAC, IP address, and etcetera) is outlined within the taught use of IAPP 
(Page 2, Lines 11-15). Please see "IAPP Enhancement Protocol," §3.3-4, pages 343- 
344, for verification]. 

As per claim 20 , the rejection of claim 16 is incorporated and Choi teaches: the open 
parameter comprises information about the wireless terminal [Key generation by 
parameters (MAC, IP address, and and etcetera) is outlined within the taught use of 
IAPP (Page 2, Lines 11-15). Please see "IAPP Enhancement Protocol," §3.3-4, pages 
343-344, for verification]. 

As per claim 21 . the rejection of claim 16 is incorporated and Choi teaches: the open 
parameter comprises the address of the first access point and the address of the 
wireless terminal [Key generation by parameters (MAC, IP address, and etcetera) is 
outlined within the taught use of IAPP (Page 2, Lines 11-15). Please see "IAPP 
Enhancement Protocol," §3.3-4, pages 343-344, for verification]. 
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As per claim 22 , the rejection of claim 16 is incorporated and Choi teaches: transmitting 
the handoff encryption key from the first access point to the wireless terminal [Page 7, 
§3.2, Lines 4-6]. 

As per claim 23 , the rejection of claim 16 is incorporated and Choi teaches: at the 
wireless terminal, transmitting to the second access point data encrypted by the handoff 
encryption key [Figure 6, page 6-7 section 3.2]. 

As per claim 24 , the rejection of claim 16 is incorporated and Choi teaches: at the 
second access point, obtaining the address of the first access point [Page 2, 
Introduction, Lines 11-14]. 

As per claim 25 , the rejection of claim 16 is incorporated and Choi teaches: at the 
second access point, obtaining the address of the wireless terminal [Key generation by 
parameters (MAC, IP address, and etcetera) is outlined within the taught use of IAPP 
(Page 2, Lines 11-15). Please see "§3.3-4, pages 343-344, Protocol" for verification. 
Please see "IAPP Enhancement Protocol," §3.3-4, pages 343-344, for verification]. 

As per claim 26 , the rejection of claim 16 is incorporated and Choi teaches: at the 
second access point, deriving the handoff encryption key according to the key 
generation process [Key generation by parameters (MAC, IP address, and etcetera) is 
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outlined within the taught use of IAPP (Page 2, Lines 11-15). Please see "IAPP 
Enhancement Protocol," §3.3-4, pages 343-344, for verification]. 

As per claim 27 , the rejection of claim 16 is incorporated and Choi teaches: 

at the second access point, decrypting data from the wireless terminal with the handoff 

encryption key [Figure 6, page 6-7 section 3.2]. 

As per claim 28 , Choi teaches: A wireless communication network comprising: an 
authentication server operable to generate and transmit a handoff encryption key; a first 
access point, receiving the handoff encryption key; and a second access point, 
receiving the handoff encryption key from the authentication server, at the time of 
handoff of a wireless terminal from the first access point to the second access point, 
decrypting the encrypted data from the wireless terminal [Page 1, Introduction, Lines 
11-14 and Page 6-7, §3.2, Fig. 5, 6]. 

Choi teaches the authentication of the wireless terminal with an authentication server 
[Fig. 5]. 

Choi doesn't expressively mention decrypting encrypted data from the wireless terminal 
before the authentication of the wireless terminal is completed. 

Faccin teaches at the time of a handoff of a wireless terminal from the first access point 
to the second access point, decrypting encrypted data from the wireless terminal (i.e. 
secure data transmission during the handoff without perceivable interruption) [col. 2 
lines 1-16, Fig. 1,5, col. 6 lines 13-29, 35-37]. 
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Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Faccin with Choi provide immediate secure data 
transmission during the handoff without perceivable interruption, since one would have 
been motivated to provide security mobility between different cellular networks [Faccin, 
col. 1 lines 9-10]. 

Choi and Faccin do not expressively mention handling an authentication of the wireless 
terminal, at the time of a handoff of a wireless terminal from the fist access point to the 
second access point (re-authentication of the wireless terminal) while decrypting before 
the authentication of the wireless terminal is completed. 

Palekar teaches handling an authentication of the wireless terminal, at the time of a 
handoff of a wireless terminal from the fist access point to the second access point (re- 
authentication of the wireless terminal) while decrypting the encrypted data before the 
authentication of the wireless terminal is completed [paragraph 0051]. 
Therefore, it would have been obvious to a person of ordinary skill in the art at the time 
the invention was made to combine Palekar with Choi and Faccin to establish the TLS 
tunnel, since one would have been motivated to provide fast reconnect mechanism that 
allows wireless connections to be quickly resumed and to avoid service disruptions 
each time the mobile user connects to a different wireless access point [Palekar, 
paragraph 0010]. 
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As per claim 29 , the rejection of claim 28 is incorporated and it encompasses limitations 
that are similar to limitations of claim 2. Thus, it is rejected with the same rationale 
applied against claim 2 above. 

As per claim 30 , the rejection of claim 28 is incorporated and it encompasses limitations 
that are similar to limitations of claim 4. Thus, it is rejected with the same rationale 
applied against claim 4 above. 

As per claim 31 , the rejection of claim 28 is incorporated and it encompasses limitations 
that are similar to limitations of claim 5. Thus, it is rejected with the same rationale 
applied against claim 5 above. 

As per claim 32 , the rejection of claim 28 is incorporated and it encompasses limitations 
that are similar to limitations of claim 6. Thus, it is rejected with the same rationale 
applied against claim 6 above. 

As per claim 33 , the rejection of claim 28 is incorporated and it encompasses limitations 
that are similar to limitations of claim 10. Thus, it is rejected with the same rationale 
applied against claim 10 above. 



As per claim 55 , it encompasses limitations that are similar to limitations of claim 28. 
Thus, it is rejected with the same rationale applied against claim 28 above. 
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As per claim 64 , the rejection of claim 3 is incorporated and Choi teaches: transmitting 
the handoff key to the first access point and the second access point, which is used to 
encrypt/decrypt the data during the handoff [Page 2, Introduction, Lines 17-19, Fig. 5]. 
Further, Faccin teaches the handoff encryption key is used during handing off from the 
first access point to the second access point [col. 6 lines 4-29, 35-37]. 

Double Patenting 

The nonstatutory double patenting rejection is based on a judicially created 
doctrine grounded in public policy (a policy reflected in the statute) so as to prevent the 
unjustified or improper timewise extension of the "right to exclude" granted by a patent 
and to prevent possible harassment by multiple assignees. A nonstatutory 
obviousness-type double patenting rejection is appropriate where the conflicting claims 
are not identical, but at least one examined application claim is not patentably distinct 
from the reference claim(s) because the examined application claim is either anticipated 
by, or would have been obvious over, the reference claim(s). See, e.g., In re Berg, 140 
F.3d 1428, 46 USPQ2d 1226 (Fed. Cir. 1998); In re Goodman, 11 F.3d 1046, 29 
USPQ2d 2010 (Fed. Cir. 1993); In re Longi, 759 F.2d 887, 225 USPQ 645 (Fed. Cir. 
1985); In re Van Ornum, 686 F.2d 937, 214 USPQ 761 (CCPA 1982); In re Vogel, 422 
F.2d 438, 164 USPQ 619 (CCPA 1970); and In re Thorington, 418 F.2d 528, 163 USPQ 
644 (CCPA 1969). 

A timely filed terminal disclaimer in compliance with 37 CFR 1 .321 (c) or 1 .321 (d) 
may be used to overcome an actual or provisional rejection based on a nonstatutory 
double patenting ground provided the conflicting application or patent either is shown to 
be commonly owned with this application, or claims an invention made as a result of 
activities undertaken within the scope of a joint research agreement. 

Effective January 1, 1994, a registered attorney or agent of record may sign a 
terminal disclaimer. A terminal disclaimer signed by the assignee must fully comply with 
37 CFR 3.73(b). 
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3. Claims 1-64 are provisionally rejected on the ground of nonstatutory 
obviousness-type double patenting as being unpatentable over claims 1-25 of 
copending Application No. 10/290,650. Although the conflicting claims are not identical, 
they are not patentably distinct from each other because both sets of claims are drawn 
to composing handoff encryption keys for two access points of an IEEE 802.1 1 standard 
network for fast handoff. Both sets of claims (instant application's claims 1-27 and 
copending application's claims 1-25) match in order they are presented using the most 
recent set of amended claims within the copending application (dated 10/27/2005). 

This is a provisional obviousness-type double patenting rejection because the 
conflicting claims have not in fact been patented. 

Response to Argument 

4. Applicant's arguments filed July 14, 2009 have been fully considered but they are 
not persuasive. 

Regarding to applicant's argument to claim limitation "initiating authentication of 
the wireless terminal with an authentication server and communicating the data packet 
for immediate secure data transmission before the authentication of the wireless 
terminal is completed", Examiner disagrees since Palekar teaches the transport layer 
security (TLS) protocol which can be used to establish a secure method of 
communication between two devices on a network. The TLS protocol provides a 
mechanism for encrypting the messages between two entities. The TLS protocols 
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protects the transmission of authentication messages between two end points by 
initially setting up the TLS tunnel and postponing authentication until after the 
TLS tunnel has been created . Once the tunnel/connection between the user 
computer device and the wireless access point has been established, further 
authentication can take place between the user's computing device and an 
authentication server, with which the user's computing device now has access to 
because of the connection to the access point. Therefore, it meets the claim limitation. 
Based on the reason above the cited prior art teaches the claim limitation, however, if 
the applicant believes that the pending claims are distinct from the cited prior art, the 
applicant needs to further modify the claim limitation/language to clarify the claim 
subject matter for further consideration and distinction from the prior art. 

Examiner acknowledges the applicant's remark regarding the double patent 
rejection. Therefore, Examiner still maintains the Double patenting rejection due to lack 
of the terminal disclaimer. 

For the above reasons, it is believed that the rejections should be sustained. 

Conclusion 

5. Accordingly, THIS ACTION IS MADE FINAL. See MPEP § 706.07(a). Applicant 
is reminded of the extension of time policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
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TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications 
from the examiner should be directed to Nirav Patel whose telephone number is 571- 

272- 5936. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Vu can be reached on 571-272-3859. The fax and phone 
numbers for the organization where this application or proceeding is assigned is 571- 

273- 8300. Any inquiry of a general nature or relating to the status of this application or 
proceeding should be directed to the receptionist whose telephone number is 571-272- 
2100. 

/N.PJ 

Examiner, Art Unit 2435 
/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



